Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEEB3ED236E911ECB62CD97BD8A014CE.roa
File:                     FEEB3ED236E911ECB62CD97BD8A014CE.roa (raw, json)
Hash identifier:          pWwajL3vSRn7eNKmQyhQlgGjFGS6NtK2UrAgwFrfQ8s=
Subject key identifier:   D3:C1:9E:E4:23:79:3F:4C:F6:25:FD:9F:75:5D:8F:F0:72:65:BB:B8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0BDE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEEB3ED236E911ECB62CD97BD8A014CE.roa
Signing time:             Wed 27 Oct 2021 05:51:57 +0000
ROA not before:           Wed 27 Oct 2021 05:51:54 +0000
ROA not after:            Thu 27 Oct 2022 05:51:54 +0000
asID:                     58895
IP address blocks:        45.206.52.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3038 (0xbde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 05:51:54 2021 GMT
            Not After : Oct 27 05:51:54 2022 GMT
        Subject: CN=6178e8fd-b4f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a2:d9:6d:b8:9c:4e:cc:6d:e9:18:66:f7:ed:
                    8a:9d:7a:15:5b:02:6e:f9:a7:f6:5c:88:a1:eb:eb:
                    17:a9:6e:de:57:97:69:b4:a1:d8:da:16:04:9c:04:
                    5b:4e:98:f7:fb:5f:4d:72:95:39:0b:32:ac:46:86:
                    43:b3:60:02:1c:46:15:e9:6a:b8:c9:63:7a:4a:4e:
                    b6:83:1f:3b:60:5b:5a:af:e8:89:09:70:47:4e:8d:
                    bd:27:2b:cf:c1:96:65:20:0d:14:c1:46:52:35:6f:
                    5c:32:d8:c7:d7:b6:b7:23:d8:cf:19:eb:02:a5:64:
                    46:b0:fe:d8:33:14:f3:19:6f:fd:8c:44:48:f2:49:
                    18:f7:b3:bb:7e:f3:59:87:d4:d0:42:c7:07:d6:d8:
                    b6:19:31:c1:7d:60:35:15:12:75:9c:c9:bb:49:5d:
                    9c:a0:f7:16:9c:de:39:e3:1c:2d:bb:a6:f3:73:3f:
                    34:2e:81:e8:af:74:e9:e1:e0:fd:9f:7a:20:1a:0c:
                    65:33:1a:5b:22:f3:29:e6:a8:e9:28:44:b4:b3:19:
                    82:08:2f:96:e3:44:9e:6b:8f:01:40:99:95:8d:14:
                    8a:f5:26:d4:7d:51:37:6b:9f:a0:a3:1e:80:a4:db:
                    12:51:fa:27:a4:c1:fe:f3:40:74:61:bb:ee:d3:d5:
                    f8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C1:9E:E4:23:79:3F:4C:F6:25:FD:9F:75:5D:8F:F0:72:65:BB:B8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEEB3ED236E911ECB62CD97BD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:66:27:98:f9:ea:e1:5f:38:54:d7:90:55:25:5d:5c:ee:63:
         d8:38:6b:69:ce:ad:f8:92:79:08:e3:08:70:1e:fe:59:ec:b6:
         fa:bb:f3:6d:39:37:07:48:3b:ae:4e:62:a6:0a:ec:ee:8c:eb:
         ea:92:d8:84:8b:b8:b6:7c:ab:44:fa:93:ff:88:63:85:49:bf:
         cf:da:95:d3:35:09:28:1a:b2:7f:34:0c:8e:c1:85:5b:52:01:
         32:a6:99:e3:01:24:51:81:0a:3b:ba:e0:43:7c:32:70:97:d3:
         44:c8:1e:47:d2:5e:b4:4c:52:34:32:14:72:36:6c:15:76:92:
         2d:d2:43:97:59:bb:ad:56:98:d7:da:02:c1:45:41:36:df:09:
         ce:27:bf:f2:62:47:9a:cf:b1:ce:e6:39:f4:80:70:a7:c8:6d:
         5c:35:c5:5b:35:0b:bc:36:99:7e:94:a0:c4:92:08:5e:a6:eb:
         8e:23:cb:2a:18:3c:fc:7f:5c:f8:4f:7b:a5:24:32:9a:7d:3b:
         57:13:2f:23:cb:f8:22:9d:53:4d:6f:eb:0c:de:45:4a:78:bd:
         a3:66:44:db:d4:2c:70:b7:c4:5f:f5:eb:ee:8d:51:61:aa:94:
         4c:f1:cf:8c:a8:dc:b1:b1:72:6d:52:e1:72:0b:dc:e7:52:f6:
         05:e4:ac:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----